24bc736393
Merge pull request 'Register R325: an assignment made while its module's build runs (hq issue 325)' (#68) from fix/assign-says-why-a-module-is-not-there into main
mesh-admin2026-10-08 14:58:10 +00:00
33e63ee5b4
Point R325 at #150's head after its second review
jochen2026-10-08 16:46:21 +02:00
5c128c1c18
Point R325 at #150's head after its rebase and review
jochen2026-10-08 16:22:30 +02:00
c02a8ec4c8
Register R325, so an assignment made while its build runs stays answered
jochen2026-10-08 15:50:18 +02:00
983fd839eb
Merge pull request 'Register R318: a wait for a person's new login passes the gate (hq issue 318)' (#67) from fix/318-a-wait-for-a-person-is-not-a-failure into main
mesh-admin2026-10-08 13:03:08 +00:00
1455d9560e
Prove R318 on the fix's head, which gives the new condition its plain words (hq issue 318)
jochen2026-10-08 14:37:35 +02:00
65ae6a9f89
Register R318: a wait for a person's new login passes the gate and stalls no walk (hq issue 318)
jochen2026-10-08 13:42:33 +02:00
596f0b4532
Merge pull request 'Register R314: an answer larger than one message of the bus is paged, not lost (hq issue 314)' (#66) from replays/314-a-large-answer into main
mesh-admin2026-10-08 11:09:58 +00:00
d452a47be0
Register R314: an answer larger than one message of the bus is paged, not lost (hq issue 314)
jochen2026-10-08 11:27:21 +02:00
99923bed12
Merge pull request 'Register the replay of issue 309 (hq ADR 0237)' (#64) from replays/309-an-order-rule-yields-to-a-stronger-one into main
mesh-admin2026-10-08 09:27:28 +00:00
434bac93ce
Register the replay of issue 309 (hq ADR 0237)
jochen2026-10-08 10:44:39 +02:00
1e371cd829
Merge pull request 'Register R310: a pull request is judged by the base branch's merge-check.sh (hq issue 310)' (#65) from replays/310-the-base-branchs-check-judges into main
mesh-admin2026-10-08 09:10:24 +00:00
157bb18fa8
Register R310: a pull request is judged by the base branch's merge-check.sh
jochen2026-10-08 10:59:10 +02:00
6fd0683425
Merge pull request 'The lab runs on the laptop again: the walk's builder on the bus, runtime images on node-tools, enumeration tests independent of the host's incus (hq issues 307, 308)' (#63) from fix/the-lab-runs-on-the-laptop into main
mesh-admin2026-10-08 08:34:39 +00:00
193e669bf1
Merge pull request 'Register the replay of issue 305 (hq ADR 0237)' (#62) from replays/305-a-recheck-left-the-old-verdict-standing into main
mesh-admin2026-10-08 08:34:27 +00:00
20bdf96b31
Merge pull request 'Prove a machine joins through the tunnel with the bus closed to it (hq ADR 0169)' (#61) from feat/a-machine-joins-through-the-tunnel into main
mesh-admin2026-10-08 08:24:17 +00:00
8368516253
The two-node walk's builder holds its seat over the bus, on a credential the mesh delivered
jochen2026-10-08 10:15:59 +02:00
c76c64a4b5
Build a module's runtime image on node-tools, the runtime that replaced mesh-tools' npm package
jochen2026-10-08 10:15:59 +02:00
179f73c18f
Inject the incus command, so the enumeration tests fail incus on every machine
jochen2026-10-08 10:15:59 +02:00
505db85539
Merge remote-tracking branch 'origin/main' into fix/the-lab-runs-on-the-laptop
jochen2026-10-08 10:15:59 +02:00
09d347a045
Register the replay of issue 305, run in the catalogue module it lives in (hq ADR 0237)
jochen2026-10-08 10:11:57 +02:00
e80a4b1642
Prove a machine joins through the tunnel in a bed of its own
jochen2026-10-08 01:52:58 +02:00
35babebbd1
Merge pull request 'Register the replays of issues 292 and 298 (hq ADR 0237)' (#60) from replays/292-298 into main
mesh-admin2026-10-07 23:41:44 +00:00
4b7ad9a387
The two-node bed stocks the packet filter's seat runtime
jschoubben2026-10-02 18:08:04 +02:00
8fdbf9ca90
The two-node bed waits for the anchor's first apply before its filter
jschoubben2026-10-02 16:46:16 +02:00
db0069f262
The two-node bed joins its second machine through the tunnel
jschoubben2026-10-02 16:41:00 +02:00
960539066e
The two-node bed places the bus's users as genesis must
jschoubben2026-10-02 16:29:21 +02:00
d2c6e8fc5a
The two-node bed proves a machine joins through the tunnel with the bus closed to it
jschoubben2026-10-02 15:11:18 +02:00
d0b0c7b02a
Register the replays of issues 292 and 298, each proved to fail before its fix and pass on it (hq ADR 0237)
jochen2026-10-08 01:27:37 +02:00
b75a17e51b
Merge pull request 'Check the Go replays in the Go toolchain, and register R301 and R302 (hq issues 301, 302)' (#59) from fix/the-replays-are-checked-in-go into main
mesh-admin2026-10-07 22:26:26 +00:00
c4f57432e1
Check the Go replays in the Go toolchain, and register R301 and R302 (hq issues 301, 302)
jochen2026-10-08 00:13:46 +02:00
a9c3bd8e6d
Merge pull request 'Register the replays of issues 296, 299 and 300 (hq ADR 0237)' (#58) from replays/296-299-300 into main
mesh-admin2026-10-07 21:55:20 +00:00
74c59661b1
Register the replays of issues 296, 299 and 300, each proved to fail before its fix and pass on it (hq ADR 0237)
jochen2026-10-07 23:43:56 +02:00
a7903562b4
Merge pull request 'Name the merges R145 and R-crashloop replay at, not branches that are gone' (#57) from fix/r145-names-its-merges into main
mesh-admin2026-10-07 16:54:27 +00:00
14246bcf01
Name the merges R145 and R-crashloop replay at, not branches that are gone
jochen2026-10-07 18:49:58 +02:00
2b489783ec
Merge pull request 'Prove every changed health check on a bed before the catalogue merges (hq ADR 0240, to-be 48 Phase D)' (#56) from feat/health-the-bed into main
mesh-admin2026-10-07 16:28:44 +00:00
3d871c992d
Merge pull request 'Replay the silent web application: its declared HTTP check raises it within two looks (hq ADR 0240 Phase B, issue 145)' (#55) from feat/health-the-field into main
mesh-admin2026-10-07 16:28:34 +00:00
a1a03f9880
Pull an image named by its digest as the runtime's own client does, and say a pull that failed
jochen2026-10-07 15:52:54 +02:00
eecbfd6693
Prove every changed health check on a bed before the catalogue merges (hq ADR 0240, to-be 48 Phase D)
jochen2026-10-07 15:12:26 +02:00
d93f1e4eab
Replay the silent web application: its declared HTTP check raises it within two looks (hq ADR 0240 Phase B, issue 145)
jochen2026-10-07 14:41:54 +02:00
69e1215424
Merge pull request 'Replay the crash loop: a container that exits at start fails its gate on the first machine (hq ADR 0240)' (#54) from feat/a-module-says-how-it-is-healthy into main
mesh-admin2026-10-07 00:39:40 +00:00
5e3ae7b835
Replay the crash loop: a container that exits at start fails its gate on the first machine (hq ADR 0240)
jochen2026-10-07 02:28:50 +02:00
bc3709a66a
Merge pull request 'A merge check of its own (hq ADR 0238)' (#53) from feat/a-merge-check-of-its-own into main
mesh-admin2026-10-06 21:00:38 +00:00
6b44d7c414
Check the lab's own code before it merges (hq ADR 0237)
jochen2026-10-06 22:06:35 +02:00
8962454530
Merge pull request 'Phase 5: replay the core incidents, and prove each fails before its fix (hq ADR 0237)' (#52) from feat/replays into main
mesh-admin2026-10-06 19:19:21 +00:00
70f62ee17b
Replay the core incidents, and prove each fails before its fix and passes on it (hq to-be 45 §9)
jochen2026-10-06 21:01:39 +02:00
a4f6bb8ce0
Merge pull request 'The trust bed raises a mesh, and places the bus's users as genesis must' (#53) from feat/the-trust-bed-raises-a-mesh into main
mesh-admin2026-10-01 11:18:12 +00:00
a734d427c0
A bed says what it actually needs to be pointed at
jschoubben2026-09-29 17:45:09 +02:00
f2d6ab3bf9
The trust bed raises a mesh, and places the bus's users as genesis must
jschoubben2026-09-29 17:37:08 +02:00
f94ee2dd0e
Merge pull request 'A bed for the trust anchor, and the bundle rewrite its foundation needs' (#52) from feat/ca-trust into main
jschoubben2026-09-29 14:06:38 +00:00
62a02d7e94
A bed for the trust anchor, and the bundle rewrite its foundation needs
jschoubben2026-09-29 15:26:05 +02:00
08e3aa04e7
Merge pull request 'Adoption bed: a machine in use raised adopted, held, taken and converged (hq ADR 0100–0103)' (#51) from feat/adoption-mode into main
jschoubben2026-09-22 21:02:12 +02:00
d93dc2628f
Adoption bed: the anchor keeps its host service, so a machine that reboots comes back holding itself; only the fresh-machine dry run goes without
jschoubben2026-09-22 20:52:42 +02:00
23ca9cadad
Adoption bed: the machine the predecessor leaves also runs a container with no restart policy
jschoubben2026-09-22 20:05:21 +02:00
204a226e36
Adoption bed: prove the guard rather than the found firewall, the runtime's own settings and a container with no restart policy, a held file not reverted once its writer stops, and the operator's rule outliving the mesh's opening
jschoubben2026-09-22 19:53:47 +02:00
8d9e4bdb77
Adoption bed: the container probe asks the guard's promise, admitting the container interface through the found firewall for itself alone
jschoubben2026-09-22 19:00:39 +02:00
3f224c2876
Adoption bed: an opening the operator's own rule answers is satisfied, and a failed container probe records its evidence
jschoubben2026-09-22 18:49:06 +02:00
a53dc8c586
Adoption bed (in progress): a machine in use raised adopted, held, opened through its firewall, taken and converged (hq ADR 0100-0103)
jschoubben2026-09-22 18:19:36 +02:00
bb746505dc
Merge pull request 'The store-window bed: a machine enrols and a report arrives while the store is away (issue 083)' (#50) from multiple-fixes into main
jschoubben2026-09-22 14:42:59 +02:00
514f7a46cd
The store-window bed holds a report through the gap, asserts the enrolment is answered meanwhile, and compares the keys the mesh recorded with the ones the machine generated
jschoubben2026-09-22 14:24:01 +02:00
c9fd6d7887
A bed that takes the store away while a machine enrols, and holds the enrolment to completing on its own (novox/hq issue 083)
jschoubben2026-09-22 14:08:45 +02:00
4d2ec6e6a8
Merge pull request 'A cache consumer must present its login; the two-node bed runs green again' (#49) from multiple-fixes into main
jschoubben2026-09-22 13:53:15 +02:00
dba95f7e27
The two-node bed's baserow data directory is 0755, as the catalogue's
jschoubben2026-09-22 13:46:04 +02:00
3ce66e8369
The two-node bed's copies declare the secrets they take through the environment, as the catalogue does (ADR 0086)
jschoubben2026-09-22 13:30:01 +02:00
3f71b91fb8
The two-node bed's timeout report shows the node that did not answer, not always the second one
jschoubben2026-09-22 12:59:28 +02:00
2dfffd6dac
Review of 081: the bed asserts baserow chose its own cache and it challenges for its password; the check reads only what a module hands its software; stale comments
jschoubben2026-09-22 12:34:59 +02:00
36f2fd1c2c
A cache consumer presents the login it was granted, checked over the catalogue; the two-node bed's baserow keeps its own cache and the bed asserts it answers (issue 081)
jschoubben2026-09-22 12:26:34 +02:00
7a5d670e4e
Merge pull request 'The large mesh bed runs end to end again: 21/21' (#48) from multiple-fixes into main
jschoubben2026-09-22 02:19:15 +02:00
8a85e2d02e
The grant bed's tenancy assertions are scoped to the login's keyspace, as redis scopes the ACL
jschoubben2026-09-22 01:41:16 +02:00
146d7da9ef
The large bed starts the hand-started builder where a build is asked for: it does not outlive the broker's first reconcile
jschoubben2026-09-22 01:30:53 +02:00
10cfbd094a
Review: the cache grant's tenancy assertions move into the grant bed; retirement notes say what the beds prove; the builder binary is pushed on a warm return; the large bed needs the catalogue
jschoubben2026-09-22 01:27:52 +02:00
353cf88a4b
The large mesh bed catches up with the mesh: the anchor's filter derived, ports declared, an image awaited, one host and builder on a warm return, resolvers from the catalogue; four tests retired for the beds that prove them
jschoubben2026-09-22 01:16:13 +02:00
9eaa3a623d
node_modules is not tracked: the link committed by mistake goes, and the ignore covers a link too
jschoubben2026-09-22 00:38:07 +02:00
a964ec287d
Merge pull request 'Issue 074 closed: the last WEARING fixtures renamed or retired; a stale delivery fixed' (#47) from multiple-fixes into main
jschoubben2026-09-21 23:58:49 +02:00
2da442729f
Review: the node_modules link is not committed; two beds no longer issue modules with no broker secret; a stale header
jschoubben2026-09-21 23:56:02 +02:00
03bbc37572
Beds issue only modules with a broker secret: an own secret is minted at resolve
jschoubben2026-09-21 23:46:27 +02:00
484fafe799
mesh.test.ts: the consumer's login carries its slug
jschoubben2026-09-21 23:43:01 +02:00
7c81902571
mesh.test.ts: meshboard gets a slug (ADR 0049); the builder-as-module test is retired, genesis proves it
jschoubben2026-09-21 23:38:58 +02:00
080150addb
provider-on-backend-network: no longer names a retired bed
jschoubben2026-09-21 23:35:17 +02:00
fd1e5499d0
Retire provider-uses-mesh-credential: the grant end-to-end bed proves it against the catalogue's redis, with the mesh writing the contributions; its no-seal-key assertion moves there (issue 074)
jschoubben2026-09-21 23:35:01 +02:00
0d8eac88c3
whole-mesh-full delivers amqp-email-forwarder's smtp-password under the name the module declares (found by issue 078's refusal)
jschoubben2026-09-21 23:31:34 +02:00
2e0f11dfc2
Three beds give their fixtures names that are no catalogue module's (issue 074)
jschoubben2026-09-21 23:25:36 +02:00
e1739b1caf
Merge pull request 'The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first' (#46) from multiple-fixes into main
jschoubben2026-09-21 22:58:25 +02:00
b0eddd28d8
build-route-proxy-image.sh builds FROM the bases the manifest declares
jschoubben2026-09-21 22:56:25 +02:00
2ce130c256
whole-mesh-full: an own-secret is declared under own-secrets
jschoubben2026-09-21 22:55:00 +02:00
e64d296c80
whole-mesh-full: issue a module with an own-secret, not only one with a broker account
jschoubben2026-09-21 22:54:09 +02:00
acb8d3da88
whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098)
jschoubben2026-09-21 22:53:28 +02:00
f785f5892a
The route-forwarding bed converges the overlay before the modules: the proxy fetches the roots at the private-network address at first start
jschoubben2026-09-21 22:41:36 +02:00
d95174da02
The route-forwarding bed places its machine on the overlay: the authority certifies its private-network address
jschoubben2026-09-21 22:35:33 +02:00
2530ca762e
The lab stands in for the builder on an upstream artifact too: the reference the manifest pins
jschoubben2026-09-21 22:33:44 +02:00
107257faf4
The route-forwarding bed installs the catalogue's authority, proxy and consumer
jschoubben2026-09-21 22:27:17 +02:00
690596d33b
The whole-mesh bed installs the vault before the modules that keep a secret from it; route-forwarding waits on issue 076
jschoubben2026-09-21 22:16:15 +02:00
31163865d2
Merge pull request 'Multiple fixes: six beds retired (074), the certificate bed against Pebble and step-ca (020), a coupled-pair spike (066)' (#45) from multiple-fixes into main
jschoubben2026-09-21 22:13:19 +02:00
69d3813ae1
The certificate bed reads the names a certificate is for from its alternative names
jschoubben2026-09-21 22:11:01 +02:00
2bc1230252
The certificate bed's backend is a real server: its netcat loop never listened
jschoubben2026-09-21 22:08:52 +02:00
b6be7ac8af
The second-authority test stops the proxy by its anchored path: the process name is truncated in the table
jschoubben2026-09-21 22:02:08 +02:00
38672cd356
The second-authority test stops the proxy by name, not by a pattern its own shell matches
jschoubben2026-09-21 21:57:39 +02:00
8a3e7dbd1b
A spike for issue 066: a coupled pair half-applied, and what the machine is observed doing
jschoubben2026-09-21 21:55:45 +02:00
ab5b0d11da
The certificate bed orders the same certificate from a second authority, the catalogue's own
jschoubben2026-09-21 21:54:13 +02:00
26177d81be
Six beds retired: their coverage lives in the catalogue beds and the whole-mesh beds now
jschoubben2026-09-21 21:53:11 +02:00
mesh-admin
jochen
jschoubben